embeds iframes

[cqupt-yifanwu]

‌Our project embeds iframes with different domains (though the main domain is the same), including access to local network resources within them. How should we prompt the user in this case?

[christhompson]

Could you say more about what you mean by "prompt the user"? If you specify the correct permissions policy allowlist on the iframes, then browsers will show the permission prompt when the subframe document makes a local network request.

[josephrocca]

If you specify the correct permissions policy allowlist

Since it took me a bit to work out: For the benefit of other noobs like me hitting this thread via search, just add allow="local-network-access" to your iframe like this:

<iframe allow="local-network-access"></iframe>

At least, that seems to have solved my issue, which was to allow the child frame to make a request to an API at https://localhost:3000.